An approval-integrity flaw in OpenClaw allows attackers to execute unintended code by tricking operators into approving misleading command payloads.

This is an approval-integrity vulnerability (CWE-451) within the node-host system.run function. An authenticated user can induce the system to display deceptive command text, masking the execution of malicious wrapper binaries.

The ability to execute unauthorized shell commands poses a severe risk to system integrity and confidentiality. Successful exploitation could lead to full compromise of the affected node-host, resulting in unauthorized data access or disruption of critical business services. Given the CVSS score of 7.1, this vulnerability represents a high-severity risk that requires prompt mitigation to prevent potential lateral movement or system takeover.

Immediate Action: Update the OpenClaw package to version 2026.3.11 or later to resolve the UI misrepresentation flaw.

Proactive Monitoring: Audit system logs for unexpected execution of wrapper binaries and review operator history for unusual command approval patterns.

Compensating Controls: Restrict permissions for the node-host system.run function to a minimal set of trusted administrative users to reduce the attack surface.

Public Exploit Available: No

This vulnerability highlights the danger of user interface misrepresentation in security-critical command approval workflows. Administrators should prioritize the update to version 2026.3.11 immediately to ensure that shell payloads are accurately rendered. Failure to patch may allow attackers to bypass intended security controls by manipulating the information presented to operators.